CVE-2026-60090
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A vulnerability in PraisonAI before version 4.6.78 allows SQL/CQL injection due to improper validation of the dimension argument in PGVector and Cassandra backends. An attacker can pass a malicious string that is directly interpolated into the CREATE TABLE query, potentially leading to unauthorized database operations.
Risk Assessment
The risk involves the possibility of executing arbitrary SQL/CQL commands by an attacker, which could result in data integrity compromise, data loss, or unauthorized access to sensitive information stored in the database.
Recommendation
Immediately update PraisonAI to version 4.6.78 or later, which includes a fix for the dimension argument validation. Additionally, restrict access to collection creation functions to trusted users only.
Original NVD description (English source)
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as '3); DROP TABLE tenant_secrets; --' to inject SQL/CQL tokens into the statement executed by the database driver.